Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

8

Static

static

3

eac13b46a2...aN.exe

windows7-x64

8

eac13b46a2...aN.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    eac13b46a2de019346f83dbd97770d744e4e1aa4ce188890e2705b8028abf44aN

  • Size

    70KB

  • Sample

    241004-tctlgsxcmb

  • MD5

    bb26dcfa71036545d79066d486b79620

  • SHA1

    56910081279f8741df2aa00f6925185ea034eafe

  • SHA256

    eac13b46a2de019346f83dbd97770d744e4e1aa4ce188890e2705b8028abf44a

  • SHA512

    6a4350c0e2fa8187104b8ba98f8ec68e8fb4245fbc093e4f816710d673df89941a181ebc34ecfe43a93a9283b75b204f0c030d24d1434285226199cf2a719981

  • SSDEEP

    1536:Or3Z5IfQmv81a7pP1F3yXFdtnSjdEEEE8E:SJOfQm01q9F3yXFd1SjdEEEEP

Score
8/10
defense_evasiondiscoveryevasion

Malware Config

Targets

    • Target

      eac13b46a2de019346f83dbd97770d744e4e1aa4ce188890e2705b8028abf44aN

    • Size

      70KB

    • MD5

      bb26dcfa71036545d79066d486b79620

    • SHA1

      56910081279f8741df2aa00f6925185ea034eafe

    • SHA256

      eac13b46a2de019346f83dbd97770d744e4e1aa4ce188890e2705b8028abf44a

    • SHA512

      6a4350c0e2fa8187104b8ba98f8ec68e8fb4245fbc093e4f816710d673df89941a181ebc34ecfe43a93a9283b75b204f0c030d24d1434285226199cf2a719981

    • SSDEEP

      1536:Or3Z5IfQmv81a7pP1F3yXFdtnSjdEEEE8E:SJOfQm01q9F3yXFd1SjdEEEEP

    Score
    8/10
    defense_evasiondiscoveryevasion

    • Sets file to hidden

      Modifies file attributes to stop it showing in Explorer etc.

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Indicator Removal: File Deletion

      Adversaries may delete files left behind by the actions of their intrusion activity.

      defense_evasion
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks